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Top Stories 

• A Fort Worth man believed to be the “ZZ Top Bandit” was arrested February 4 during a 
sting operation set up by authorities who believe he could also be responsible for an 
additional 23 bank robberies throughout Texas. - KWTX 10 Waco (See item 4 ) 

• A large water main break just outside the City of Galesburg’s water treatment plant in 
Illinois caused the plant to lose more than 1 million gallons of water and caused safe, but 
rusty water for residents. - Galesburg Register-Mail (See item 15) 

• The Syrian Electronic Army is believed to be behind a digital attack of the Forbes Web site 
and its registered users after more than 1 million user and staff records were obtained. - 
Help Net Security (See item 30 ) 

• Las Vegas Sands Corp., restored its casino Web sites after a security breach forced the 
company to shut down its online operations for several days. The hacker group, Anti WMB 
Team, published a video demonstrating that 828 gigabytes of files were stolen. - Softpedia 
(See item 32 ) 
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Energy Sector 



1. February 18, Associated Press - (South Carolina) 23,000 remain without power in 
South Carolina. Utility crews worked February 18 to restore service to the remaining 
23,000 customers around South Carolina after a severe ice storm knocked out power to 
more than 350,000 at the peak of the storm. 

Source: http://www.wspa.eom/storv/24750273/23000-remain-without-power-in-south- 
carolina 

2. February 17, Associated Press - (Pennsylvania) Gas well fire in Pa. out; 1 missing, 1 
injured. A Chevron-owned natural gas well fire in Dilliner stopped burning February 
15, and authorities continue to investigate the incident that left one worker injured and 
another unaccounted for. The company stated that workers will attempt to cap both 
wells and water tanks will be filled in order to cool the site and equipment. 

Source: http://www.thereporteronline.eom/general-news/20140217/gas-well-fire-in-pa- 
out-1 -missing- 1 -injured 

For another story, see item 17 

[ Return to top] 

Chemical Industry Sector 

Nothing to report 



[ Return to top] 

Nuclear Reactors, Materials, and Waste Sector 

3. February 17, Los Angeles Times - (New Mexico) Radiation leak forces closure at 
New Mexico waste burial site. Normal operations at the Waste Isolation Pilot Plant in 
New Mexico were suspended indefinitely by officials after a radiation leak inside salt 
tunnels where the material is buried set off radiation sensors and sounded alarms 
February 14. No workers were in the plant during the leak and air filters were activated 
as a precaution. 

Source: http://www.latimes.com/nation/la-na-radiation-leak- 
20140218,0,2098213.story#axzz2th6Hv8TU 

r Return to top i 

Critical Manufacturing Sector 

Nothing to report 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

4. February 18, KWTX 10 Waco - (Texas) Texas man believed to be “ZZ Top Bandit” 
in custody. A Fort Worth man believed to be the “ZZ Top Bandit” and “The Interstate 
Bandit” was arrested February 4 during a sting operation set up by the FBI and 
Williamson County offieials. The FBI believes he may also be responsible for 23 bank 
robberies throughout Texas between January 2004 and Oetober 2013. 

Source: http://www.kwtx.com/home/headlines/Texas-Man-Believed-To-Be-ZZ-Top- 
Bandit-In-Custody-245977411.html 

[ Return to top] 

Transportation Systems Sector 

5. February 18, Toledo Blade - (Ohio) Street reopens after train derailment in Wood 
County. Main Street in Tontogany, Ohio, reopened February 1 8 after closing for 5 
hours when 18 out of 60 railcars from a northbound CSX cargo train derailed and 
caused minor damage to 2 nearby buildings February 17. 

Source: https ://www .toledoblade.com/local/20 1 4/02/ 1 8/S treet-reopens-after- train- 
derailment- in-Wood-County.html 

6. February 17, KCPQ 13 Tacoma - (Washington) Large propane leak at Port of 
Tacoma prompts evacuations. Workers from the Port of Tacoma were evacuated for 
more than 2 hours February 17 after a semi-truck carrying propane began leaking near 
the port on State Route 509. Officials believe the leak was caused by damage during 
standard offloading procedures. 

Source: http://q l3fox.eom/2014/02/17/large-propane-leak-at-port-of-tacoma-prompts- 
evacuations/#axzz2tgV GCKkO 

7. February 17, Associated Press - (National) Snow in upper Midwest disrupts air 
travel. Nearly 1,200 flights were cancelled and 3,000 others were delayed across the 
U.S. February 17 due to inclement winter conditions across the Midwest. 

Source: http://www.karell.eom/story/news/nation-now/2014/02/17/snow-in-upper- 
midwest-disrupts-air-travel/5570531/ 

8. February 17, Associated Press - (Colorado) 3 dead in Colo, plane crash. Authorities 
are investigation the cause of a single engine Beechcraft Bonanza plane crash February 
17 near Telluride Regional Airport in Denver that killed all three passengers aboard. 
Source: http://www.huffingtonpost.eom/2014/02/17/3-dead-plane- 

crash n 4803755.html 
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Food and Agriculture Sector 

9. February 18, KNSD 39 San Diego - (California) Chickens run wild after big rig 
crash. A semi-truck carrying approximately 2,600 Potrero chickens overturned and 
crashed February 17 on Highway 94 in San Diego County, killing an unknown number 
of chickens. 

Source: http://www.nbcsandiego.eom/news/local/150-Chickens-Run-Wild- After- 
Crash-2459 19441.html 

10. February 16, Food Safety News - (International) CA Health Department warns 
against eating pesticide-tainted imported cactus. The California Department of 
Public Health warned residents February 16 not to consume cactus imported from 
Mexico due to contamination from Monocrotophos, a pesticide banned in the U.S. The 
product was removed from retailers and distribution centers in California and 
quarantined and/or destroyed to eliminate threats to consumers. 

Source: http://www.foodsafetvnews.eom/2014/02/california-issues-warning-against- 
pesticide-tainted-cactus/#.UwOL6vldXlM 

11. February 15, U.S. Department of Agriculture - (International) Washington firm 
recalls dried egg products due to possible Salmonella contamination. The Food 
Safety and Inspection Service announced February 15 that Nutriom LLC recalled 
approximately 226,710 pounds of processed egg products due to possible Salmonella 
contamination. The products were distributed to retailers and U.S. military installations 
nationwide and internationally. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/20 1 4/recall-0 15-201 4-release 

12. February 14, U.S. Food and Drug Administration - (National) Ice Cream Specialties 
issues allergy alert on undeclared peanut allergen in Dairy Rich Chocolate Ice 
Cream. Ice Cream Specialties of Merrillville, Indiana, recalled February 14 its Dairy 
Rich Chocolate Ice Cream after it was discovered that some packages of Dairy Rich 
Chocolate Peanut Butter Ice Cream were mistakenly packaged in Dairy Rich Chocolate 
Ice Cream cartons, and may contain an unmarked peanut allergen. 

Source: http://www .fda. gov/Safetv/Recalls/ucm3 86 108 .htm 

13. February 13, U.S. Department of Labor - {Ohio) G&J Pepsi-Cola Bottlers faces 
$86,900 in US Labor Department OSHA penalties for exposing workers to repeat 
safety violations. The Occupational Safety and Health Administration cited G&J 
Pepsi-Cola Bottlers Inc., for five serious and two repeat workplace health and safety 
violations at its Franklin Furnace, Ohio facility for failing to protect its employees and 
implement basic safety requirements. Proposed fines totaled $86,900. 
Source: https://www. osha.gov/pls/oshaweb/owadisp. show document?p table=NEWS 
RELEASES&p id=25602 

14. February 13, U.S. Food and Drug Administration — (National) Kettle Brand 



-4- 



voluntarily recalls limited run of Bakes Sea Salt Potato Chips due to potential 
milk allergen. The U.S. Food and Drug Administration announced February 13 that 
Kettle Brand issued a voluntary recall on 144 cases of 4-ounce bags of Kettle Brand 
Bakes Sea Salt Potato Chips due to the possibility of undeclared milk. 

Source: http ://w w w . fda. go v/S afetv/Recalls/ucm3 8611 0 .htm 



[ Return to top] 

Water and Wastewater Systems Sector 

15. February 17, Galesburg Register-Mail - (Illinois) Main break affects Galesburg 
water. A large water main break just outside the City of Galesburg’s water treatment 
plant caused the plant to lose more than 1 million gallons of water and forced several 
other water mains to reverse direction, causing rusty water for residents. Authorities 
assured residents that water was safe for consumption but advised them to let the water 
run several minutes until its clears. 

Source: http ://w w w . galesburg .com/article/20 1 402 1 7 /NEW S/1402197 09/ 101 80/NEW S 

16. February 17, KWES 9 Midland/Odessa - (Texas) Boil water advisory for Gardendale 
residents extended until Wednesday. Greater Gardendale Water Supply Corporation 
customers in Texas, who were under a boil advisory beginning February 15 due to a 
leak found around the pump station area, had the order extended to February 19 
because a delay in lab results. 

Source: http ://w w w . ne ws west9 . com/story/247 45 49 8/boil- water- advisory- for- 
gardendale-residents-extended-until- Wednesday 

17. February 16, Associated Press - (North Carolina) 5,000 gallons of fuel oil spill in 
Buncombe County. Officials are monitoring Hominy Creek and the French Broad 
River in Candler, after some fuel oil reached the waterways when 5,000 gallons of fuel 
oil spilled from a tank at Harrison Construction Co. due to a failed coupling on a pipe 
and a valve containment basin that was left open. 

Source: http://www.foxcarolina.eom/storv/24738209/5000-gallons-of-fuel-oil-spill-in- 
buncombe-county 

18. February 16, Sky Valley Chronicle - (Washington) Power malfunction at sewer 
station causes sewage spill into Port Gardner Bay. An unknown amount of sewage 
was released into Port Gardner Bay after a power malfunction at an Everett sewer lift 
station February 15. Authorities were notified and signs were posted to stay out of the 
water as a precaution while the incident is investigated. 

Source: http://www.skvvallevchronicle.com/GENERAL-VALLEY-NEWS/PQWER- 
MALFUNCTION-AT-SEWER-STATION-CAUSES-SEWAGE-SPILL-INTO-PORT- 
GARDNER-BAY- 1639657 

19. February 15, WITN 7 Washington - (North Carolina) Third wastewater spill in 
Richlands in six-montbs. The Onslow Water and Sewer Authority reported that about 
10,000 gallons of partially treated wastewater spilled at the wastewater treatment plant 
in Richlands Eebruary 13 due to rain and melting snow. 
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Source: http://www.witn.com/home/headlines/Third-Wastewater-Spill-In-Richlands-In- 
Six-Months-24563728 1 .html?ref=28 1 
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Healthcare and Public Health Sector 

20. February 17, Tampa Tribune - (Florida) Deputies investigating shooting at Pasco 
medical center. Police questioned a Pasco County chiropractor February 17 at the 
West Coast Spine and Injury Center after a man was shot and injured at his office in 
Holiday. Authorities believe a confrontation took place between the two men before the 
shooting. 

Source: http://tbo.com/pasco-countv/deputies-investigating-shooting-at-pasco-medical- 
facilitv-20140217/ 

21. February 14, WXMl 17 Grand Rapids - (Michigan) Theft at dental office leads to 
drug fraud investigation, larceny charge. Police launched an investigation and 
charged two individuals in connection to drug fraud and stolen medication after 
responding to a reported break-in at a dental office in Antwerp Township February 1 1 . 
An employee of the Paw Paw dental office allowed friends to enter after hours and the 
group stole credit cards, blank checks, a doctor’s signature stamp, and a prescription 
pad. 

Source: http ://fox 17online.com/2Q 1 4/02/1 4/theft-at-dental-office-leads-to-drug-fraud- 
investigation-larcenv-charge/#axzz2tgZjlL3y 
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Government Facilities Sector 

22. February 18, Indianapolis Star - (Indiana) Fire damages Marian University’s Fisher 
Hall. Some classes were cancelled while others were relocated February 18 after a fire 
in Fisher Hall at Marian University in Indianapolis caused an estimated $250,000 in 
damage and forced the evacuation of 16 students. The cause of the fire is under 
investigation. 

Source: http://www.indvstar.eom/article/20140217/NEWS04/302170046/Fire-reported- 
Marian-University 

23. February 17, Milwaukee Journal Sentinel - (Wisconsin) Six Hartford Union students 
injured in school hus crash. A Hartford Union High School bus slid off the road and 
crashed into a tree, leaving six students injured February 17 in Dodge County. 

Source: http://www.isonline.com/news/wisconsin/six-hartford-union-students-injured- 
in-school-bus-crash-b99207960z 1-24590 1681 .html 

24. February 14, Associated Press - (Alabama) Cheaha State Park closed due to ice 
damage; reopening expected next week. The Alabama State Conservation 
Department closed Cheaha State Park in Anniston February 14 after power lines were 
knocked down and nearly 1,000 trees were either destroyed or damaged by heavy 
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coatings of ice due to a winter storm. The park will reopen during the week of February 
17. 

Source: 

http://www.greenfieldreporter.eom/view/storv/0cffe0b857694b2580b3322c09b47b2c/ 
AL— Cheaha-Park-Closed 



[ Return to top] 

Emergency Services Sector 

25. February 18, Chicago Tribune - (Illinois) Cop accidentally fires gun in police 
station. The Chicago Alternative Policing Central District station in the South Loop 
was without water after a supervisor accidentally fired his gun inside the police station, 
hit a water pipe, and caused a leak February 17. Prisoners were temporarily moved 
while officials assessed the damage. 

Source: http://www.chicagotribune.com/news/local/breaking/chi-cop-accidentally- 
fires-gun-in-police-station-201402 18,0,5 169854. story 

26. February 14, Asheville Citizen-Times - (North Carolina) Shots fired into Mills River 
fire station. The Mills River fire station suffered thousands of dollars’ worth of 
damage after more than a dozen shots were fired into the Henderson County station 
February 9. No one was in the station during the incident, but the phone system and 
heating and air conditioning unit were all destroyed. 

Source: http://www.citizen-times.com/article/2Q 1 402 14/NEW SO 1/302 1400 1 5/Shots- 
fired-into-Mills-River- fire-station 

27. February 14, Associated Press - (Michigan) Security lapses behind Michigan prison 
break. A Michigan corrections official stated February 13 that security procedures 
were not followed and surveillance equipment was not properly maintained or 
monitored in a February 2 incident where an inmate managed to escape from prison for 
24 hours. The incident is still under investigation. 

Source: 

http://www.iournalgazette.net/article/20 1402 14/LOCAL06/302 1 4992 1/1 002/LOCAL 
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Information Technology Sector 

28. February 18, Help Net Security - (International) Linksys announces firmware fix to 
neutralize “The Moon” worm. Linksys announced that they were aware of 
“TheMoon” malware targeting its older routers and are working on a firmware fix, but 
advised administrators and users to Disable Remote Administration of their devices in 
order to protect themselves from the attack. 

Source: http://www.net-securitv.org/malware news.php?id=271 1 

29. February 17, Help Net Security - (International) Kickstarter suffers data breach. 
Kickstarter notified users that their user information was accessed following a data 
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breach. The company closed the security vulnerability and began strengthening security 
measures on their systems, but recommended users change their passwords. 

Source: http ://www. net-securitv.org/secworld. php?id=16366 

30. February 17, Help Net Security - (International) SEA hacks Forbes, steals and leaks 
IM user records. The Syrian Electronic Army hacking group is believed to be behind 
a digital attack of the Forbes Web site and its registered users after more than 1 mi llion 
user and staff records were obtained. The information was made available for public 
download and Sophos researchers discovered that passwords could potentially be 
cracked after learning they were salted and hashed, not encrypted. 

Source: http ://www. net-securitv.org/secworld. php?id=16367 

31. February 15, Softpedia - (International) GitHub fixes RCE and 2FA brute-force 
vulnerabilities. GitHub fixed an SSH Git remote command execution (RCE), a two- 
factor authentication (2FA) brute-force, and a MySQE typecasting authentication 
bypass vulnerabilities after a researcher from Phonoelit identified and reported them to 
the company. 

Source: http://news.softpedia.com/news/GitHub-Fixes-RCE-and-2FA-Brute-Force- 
V ulnerabilities -427 07 8 . shtml 



For another story, see item ^ 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can he found at the IT ISAC (Information Sharing and 
Analysis Center) Weh site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 



32. February 18, Softpedia - (International) Hackers show they’ve stolen 828 Gb of data 
from systems of Las Vegas Sands. Fas Vegas Sands Corp., restored its casino Web 
sites after a security breach forced the company to shut down its online operations for 
several days. The hacker group. Anti WMB Team, published a video demonstrating 
that 828 gigabytes of files including budget information, IT department and network 
information, and user data was stolen during the breach. 

Source: http://news.softpedia.com/news/Hackers-Show-Thev-ve-Stolen-828-Gb-of- 
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Data-from-Svstems-of-Las-Vegas-Sands-427506.shtml 



33. February 17, Baltimore Sun - (Maryland) Md. hotel evacuated; nine treated for CO 
issues. Authorities are investigating the source of a carbon monoxide leak that forced 
guests and staff of The Westin Baltimore Washington Airport in Linthicum to evacuate 
the hotel for several hours February 16. Twenty-nine people were identified as having 
suffered possible carbon monoxide poisoning, and nine individuals received medical 
treatment. 

Source: http://www.firehouse.com/news/11313432/md-hotel-evacuated-nine-treated- 
for-co-issues 

34. February 17, Associated Press; Pasadena Star-News - (California) 4 hurt, 19 
displaced hy Pasadena apartment fire. Nineteen residents were displaced and 4 
adults were injured in a fire that broke out at a Pasadena apartment building and caused 
more than $500,000 in damage February 17. 

Source: http://www. sanluisobispo .com/20 1 4/02/ 1 7/293 1 45 9/4-hurt- 1 9-displaced-b y- 
pasadena.html 

35. February 15, Salt Lake Tribune - (Utah) Arson suspect arrested in huge Salt Lake 
City fire. Authorities arrested a suspect February 14 on suspicion of intentionally 
causing a 4-alarm fire that destroyed an apartment project in Salt Lake City February 9. 
The suspect was a subcontractor at the apartment complex that was under construction. 
Source: http://www.sltrib.com/sltrib/news/57551293-78/bowman-fire-lake- 
salt.html. csp 

36. February 15, Burlington Free Press - (Vermont) Fire at propane company in St. 
Albans under control. Approximately 40 residents were evacuated for several hours 
from Sunset Meadows after two 330 gallon propane tanks caught fire behind Liberty 
Propane in St. Albans February 15. Three families were displaced due to water damage 
to their apartment units caused during the response. 

Source: 

http://ww w.burlingtonfreepress .com/apps/pbcs .dll/article? AID=20 14302150011 &nclic 
k check=l 
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Dams Sector 



Nothing to report 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://w'W'vv'. dhs.gov/IPDailvReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support® govdeliverv.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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